PT-2025-41710 · Unknown · Rainygao Docsys

Rainygao + 1 · Published 2025-10-12 · Updated 2025-10-12 · CVE-2025-11630

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RainyGao DocSys versions up to 2.02.36

Description A flaw exists in the File Upload component of RainyGao DocSys. The updateRealDoc function within the /Doc/uploadDoc.do file is susceptible to path traversal due to manipulation of the path argument. This issue can be exploited remotely. The exploit is publicly available.

Recommendations Versions prior to 2.02.36 should be updated.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-11630

Affected Products

Rainygao Docsys

References · 10

• 🔥 https://github.com/xkalami-Tta0/CVE/blob/main/DocSys/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-11630 · Security Note
• https://osv.dev/vulnerability/CVE-2025-11630 · Vendor Advisory
• https://t.me/CVEtracker/34703 · Telegram Post
• https://t.me/cveNotify/138373 · Telegram Post
• https://vuldb.com/?ctiid.328042 · Note
• https://vuldb.com/?submit.664845 · Note
• https://twitter.com/VulmonFeeds/status/1977298535298085061 · Twitter Post
• https://vuldb.com/?id.328042 · Note
• https://twitter.com/CVEnew/status/1977277101280526471 · Twitter Post